About Us

For over 30 years, Magentus has been at the forefront of transforming healthcare through technology across Australia and the UK. From pathology and radiology to oncology, and practice management, our solutions connect the healthcare ecosystem and unlock better patient outcomes at scale.

At Magentus, people are at the heart of everything we do. We work as one team, united by our purpose: to create a healthier society through smarter digital healthcare.

The Role

The SecOps Engineer is responsible for ensuring the security and operational integrity of the organization's IT infrastructure. This role involves implementing and managing security measures to protect systems, networks, and data, while collaborating closely with IT and security teams to identify and mitigate risks, respond to incidents, and support compliance with internal policies and external regulations. Key responsibilities include monitoring security systems, conducting vulnerability assessments, supporting audit and compliance activities, and contributing to the development of strategies to enhance the organization's security posture. The SecOps Engineer also supports the evolution of automated security processes and the integration of security tools to support efficient and secure operations.

What You’ll Be Doing

• Monitor, analyse, and respond to security events using CrowdStrike EDR and SIEM capabilities, together with integrated telemetry from endpoints, network infrastructure, identity platforms, cloud services, and business systems.
• Configure, maintain, and optimise security technologies to safeguard hybrid environments, enabling proactive threat detection and resilient incident response through close collaboration with infrastructure, operations, and cloud teams.
• Coordinate vulnerability management activities across endpoints, servers, cloud services, and network infrastructure, including validating findings, assessing risk, assigning remediation actions, tracking progress, and escalating overdue or high-risk vulnerabilities.
• Contribute to the evolution of automated security operations and threat detection workflows, using scripting and orchestration tools to enhance efficiency and response capabilities over time, in collaboration with infrastructure and operations teams.
• Maintain and enforce information security policies, procedures, and standards in alignment with regulatory frameworks such as ISO 27001, Cyber Essentials+, and GDPR, and support internal and external audits and compliance activities.
• Investigate and respond to security events and incidents, supporting containment, eradication, recovery, root-cause analysis, and the implementation of technical controls that reduce the likelihood or impact of recurrence in collaborate with internal teams.
• Stay informed on emerging threats, vulnerabilities, and industry best practices, and contribute to the evaluation of new security technologies to support proactive measures and continuous improvement across operations.
• Contribute to knowledge sharing across the team and support the development of security awareness and best practices within the organisation.
• Develop, test, document, and tune detection rules, alerting logic, dashboards, and automated response workflows to improve visibility, reduce false positives, and strengthen incident response capability.
• Monitor and improve security controls across cloud and identity environments, including authentication, privileged access, configuration, logging, monitoring, and integration with central security platforms.
• Develop and maintain scripts, integrations, and automated response workflows that improve alert enrichment, investigation, containment, vulnerability management, reporting, and other repeatable security operations.
• Create and maintain security architecture records, operational procedures, incident response playbooks, detection documentation, system configurations, and knowledge articles.
• Deliver security platform changes through established change, incident, problem, and service management processes, ensuring changes are tested, documented, approved, and supportable.